Posted inCybersecurity News
Mustang Panda is targeting the Tibetan community with PUBLOAD and Pubshell malware campaigns and may be migrating to US targets.
Mustang Panda (also tracked as Hive0154, Earth Preta, or Camaro Dragon), a China-aligned advanced persistent threat (APT) group, has deployed PUBLOAD and Pubshell malware in a targeted cyber espionage campaign against the Tibetan community. This operation leverages Tibet-themed lures to deliver multi-stage malware for persistent access and data exfiltration.